Iron County Medical Center Data Breach Investigation

Shamis & Gentile P.A., one of the nation's premier class action law firms specializing in data breach cases, is investigating the Iron County Medical Center data breach.
If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation.
About Iron County Medical Center
Iron County Medical Center (ICMC) is an independent, not-for-profit healthcare facility located in Pilot Knob, Missouri. Established in 2003, the center is a Critical Access Hospital with a 15-bed capacity.
ICMC provides emergency care, inpatient and outpatient care, routine checkups, and surgical procedures. The hospital operates 24 hours a day, seven days a week.
What Happened?
On Dec. 6, 2024, Iron County Medical Center discovered a suspicious email sent to two employees, which prompted an immediate investigation. The email appeared to be from a third employee and requested payment for an invoice. The incident was quickly reported, and Iron County Medical Center took swift action by resetting all active email sessions, launching its incident response plan, and engaging cybersecurity experts.
The investigation found that an unauthorized party had gained access to a single email account. The breach was reported to the U.S. Department of Health and Human Services on June 18, 2025, and notification letters were mailed to affected individuals on June 30, 2025.
A total of 10,239 people in the United States were affected.
Potentially Exposed Information:
- Name
- Date of birth
- Date of service
- Doctor or provider name
- Employee ID
- Medical billing information
- Payment for health services information
- Incidental health reference
- Medical record number
- Procedure information
- Medical history
- Medical treatment information
- Other health insurance information
Your Rights and Next Steps
If you receive a notice about this data breach from Iron County Medical Center, you have you have important rights and options. You may be entitled to free identity theft protection services and credit monitoring, and have the right to seek compensation for any harm or inconvenience caused by this breach.
- Credit monitoring services: Sign up for free credit monitoring and identity theft protection services, if offered.
- Monitor your accounts carefully: Check your financial statements regularly for suspicious activity or unauthorized transactions. If you notice anything unusual, contact your financial institution immediately.
- Fraud alert and credit reports: A fraud alert informs creditors to take extra steps to verify your identity before opening new accounts in your name. Consumers are also entitled to one free credit report annually from each credit bureau. You can request a fraud alert or a credit report by contacting any one of the three major credit bureaus.
- Seek legal help: Lawyers are ready to help you understand your rights and pursue compensation.
Lawyers are ready to help you understand your legal options and take the next steps.
You May Be Entitled to Compensation
If you were affected by the Iron County Medical Center data breach, you could be eligible for compensation, which could include reimbursement for out-of-pocket expenses, time spent addressing the breach, or payment for emotional distress. Lawyers are investigating this incident and are prepared to help you assert your rights.
To find out if you qualify and to join the lawsuit, complete the form below.